From f423547a1b8a7e29941218dc3ee976e5e8dd3e16 Mon Sep 17 00:00:00 2001 From: chaos Date: Tue, 2 Apr 2024 18:38:04 +0200 Subject: [PATCH] change freshrss proxy config --- hosts/hetzner-arm/containers/rss/default.nix | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/hosts/hetzner-arm/containers/rss/default.nix b/hosts/hetzner-arm/containers/rss/default.nix index 8cdcb22..7a08bbf 100644 --- a/hosts/hetzner-arm/containers/rss/default.nix +++ b/hosts/hetzner-arm/containers/rss/default.nix @@ -46,13 +46,18 @@ in { services.nginx = { enable = true; + upstreams."freshrss" = { + servers = "${containerIP}:80"; + extraConfig = '' + keepalive 64; + ''; + }; virtualHosts."freshrss.owo.monster" = { enableACME = true; forceSSL = true; + locations."/" = { - proxyPass = "http://${containerIP}:80/"; - proxyWebsockets = true; - recommendedProxySettings = true; + proxyPass = "http://freshrss/"; extraConfig = '' add_header X-Frame-Options SAMEORIGIN; add_header X-XSS-Protection "1; mode=block";